Foundations of AI Governance

This accelerator provides foundational guidance on establishing and managing an Artificial Intelligence Management System (AIMS).

Accelerator Overview

Foundations of AI Governance introduces Impact customers to the core principles and vocabulary of Artificial Intelligence Management System (AIMS) as defined by ISO/IEC 42001. Designed as the entry point for customers seeking to advance their AI governance maturity, this session will work as part one of a three-part series where we introduce, adopt, then audit customer AIMS as part of a comprehensive consulting solution. It also includes key resources and leading practice guides to help them approach AI governance with confidence.

注:

This Accelerator is available for Impact Guided+ (Strategic Value add-on), Advanced and Total Packages.

Prerequisites

Customer has identified the necessary stakeholders who can discuss AI governance with confidence.

What You Get

Introductory Customer Session (Up to 1 hour)

Includes the following:

• What is an AIMS?
• Why implement one?
• Review stakeholder expectations
• Vocabulary overview
• Principles drafting
• Maturity evaluation

Customer Coaching Session (Up to 1 hour)

Session includes:

• Use case brainstorm
• Risk triage
• Light boundary mapping
• Success & safety criteria
• Pilot selection
• Next steps

Follow-Up Customer Session (optional upon Customer request - up to 1 hour)

• Opportunity for Questions and Answers related to AI Governance
• Provide additional guidance on leading practices

Requested Customer Resources

表 : 1. Customer resource and responsibilities

Customer Resource	Responsibilities	Required	Recommended
Platform Owner	Responsible for the overall accountability of the ServiceNow platform. Provides leadership and oversight to the System Administrators, ensures team alignment to business strategy and the ServiceNow roadmap, and is actively involved in the overarching governance of the platform.	✓
Executive Sponsor	Set direction and purpose, champion principles, provide cover & resources, bridge to stakeholders, create momentum.	✓
System Administrator(s)	Maintains the stability and usability of the ServiceNow platform. Performs application maintenance, manages support for cases related to ServiceNow applications. Contributes to ServiceNow software releases by delivering configuration tasks and features.	✓
AI Stakeholder(s)	Learn specific vocabulary and validate foundational concepts for the organization, serve as a key resource for aligning current AI use cases with information provided.	✓
Risk Management Stakeholder(s)	Learn specific vocabulary and validate foundational concepts for the organization, serve as a key resource for aligning with Risk Management practices across the org.	✓
Governance Stakeholder(s)	Learn specific vocabulary and validate foundational concepts for the organization, serve as a key resource for advancing Governance initiatives.	✓
Trusted Service Partner(s)	Attends ServiceNow Impact Accelerator coaching session(s) to understand leading practices and potentially support customer going forward.		✓

Requested Information / Access

1. Organization & scope
   1. Business context and objectives for AI (where value/risk sits), geographies served, regulated markets.
   2. Desired initial AIMS scope (org units, products, services) and any out-of-scope areas.
   3. Existing management systems/certifications (for example, ISO 27001/27701, SOC 2, QMS) we can align to.
2. Governance & people
   1. Executive sponsor, product owners, risk/compliance, privacy, security, legal, data science/ML, IT ops—names and roles (RACI if you have one).
   2. Existing committees/charters (ethics board, model risk committee), decision rights, and escalation paths.
3. Stakeholders & expectations
   1. Internal/external stakeholders (customers, regulators, employees, impacted communities) and their top expectations/concerns.
   2. Any trust/safety commitments already made publicly or contractually.
4. Risk & compliance posture
   1. Applicable laws/regimes you care about (for example, sectoral rules, state privacy laws, EU AI Act mapping if relevant) and current gap analyses.
   2. Known AI incidents/near misses, complaints, or audit findings; current risk taxonomy and appetite/tolerances.
   3. Frameworks already in play (ISO 31000, ISO/IEC 23894, NIST AI RMF).

Exclusions

• ServiceNow is not responsible for implementing Foundations of AI Governance recommendations.
• ServiceNow does not guarantee any strategic outcomes from this engagement.